add update_inner_state tool, life loop with tools, timeout protection

- update_inner_state: LLM can update its own persistent inner state
- inner_state injected into chat loop system prompt (read-only)
- Life Loop now uses run_openai_with_tools (full tool access)
- Life Loop LLM calls wrapped in 120s tokio::time::timeout
- All reqwest clients: 120s timeout (whisper: 60s)
- doc/life.md: life loop architecture design doc
- todo.md: removed completed items

src/main.rs

@@ -403,7 +403,8 @@ async fn handle_inner(
             let conv = state.load_conv(&sid).await;
             let persona = state.get_config("persona").await.unwrap_or_default();
             let memory_slots = state.get_memory_slots().await;
-            let system_msg = build_system_prompt(&conv.summary, &persona, &memory_slots);
+            let inner = state.get_inner_state().await;
+            let system_msg = build_system_prompt(&conv.summary, &persona, &memory_slots, &inner);
 
             let mut api_messages = vec![system_msg];
             api_messages.extend(conv.messages);
@@ -514,7 +515,9 @@ fn build_prompt(
 }
 
 async fn transcribe_audio(whisper_url: &str, file_path: &Path) -> Result<String> {
-    let client = reqwest::Client::new();
+    let client = reqwest::Client::builder()
+        .timeout(std::time::Duration::from_secs(60))
+        .build()?;
     let url = format!("{}/v1/audio/transcriptions", whisper_url.trim_end_matches('/'));
     let file_bytes = tokio::fs::read(file_path).await?;
     let file_name = file_path